Security Architect

Project Role : Security Architect
Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.
Must have skills : Network Security Operations
Good to have skills : NA
Minimum 12 year(s) of experience is required
Educational Qualification : 15 years full time education

Summary:
The Network Security Management Lead is responsible for overseeing the design, implementation, management, and continuous improvement of the organization s network security infrastructure. This role ensures robust protection of network boundaries, internal segments, cloud environments, and critical assets while leading a team of network security engineers. The Lead also collaborates closely with SOC, Cloud, IT, and Architecture teams to strengthen overall cyber resilience.

Roles & Responsibilities:
-Network Security Operations & Management
-Lead day-to-day management of network security devices including firewalls, VPNs, IPS/IDS, proxies, WAFs, DDoS systems, and segmentation solutions.
- Ensure continuous availability, performance, and health of network security infrastructure.
- Coordinate with vendors for support, patching, and upgrades.
- Review firewall policies, NAT rules, URL filtering, IPS signatures, and ensure optimal configurations.
-Security Architecture & Design
- Develop and implement secure network architecture aligned with best practices.
-Drive Zero Trust segmentation, secure hybrid/cloud connectivity, and micro-segmentation initiatives.
-Participate in solution design reviews and assess network security impact of new projects.
-Ensure alignment of network security controls with overall cybersecurity strategy.
-Team Leadership & Stakeholder Collaboration
- Lead, mentor, and guide a team of network security engineers.
-Allocate resources, manage workloads, and ensure SLA/OLA compliance.
-Work closely with SOC, IR, threat hunting, and IT/network teams for coordinated defense.
- Present network security posture, risks, and improvements to leadership.
-Incident Response & Threat Mitigation
- Act as SME during network-related security incidents.
-Support SOC and IR teams with packet analysis, firewall log analysis, and malicious traffic investigation.
- Implement immediate containment controls during active threats (e.g., blocking IPs, disabling routes, isolating segments).
- Conduct root cause analysis and implement corrective actions.
-Policy, Governance & Compliance
- Maintain network security standards, hardening guidelines, and baseline configurations.
- Ensure compliance with ISO 27001, NIST, PCI-DSS, and internal risk/audit requirements.
-Conduct periodic firewall rule audits, recertifications, and access reviews.
- Maintain complete and updated documentation: topology diagrams, policies, runbooks, inventory.
-Continuous Improvement & Innovation
- Identify opportunities to automate network security processes through SOAR/Scripting/API automation.
-Evaluate emerging technologies such as SASE, ZTNA, SD-WAN, and cloud-native firewalls.
- Drive initiatives to improve threat visibility and reduce attack surface.


Professional & Technical Skills:
-Expertise with network security platforms (any combination):
-Palo Alto, Cisco ASA/Firepower, , Zscaler, Prisma Access, Akamai, Cloud Azure WAF.
-Hands-on experience with:
-Palo Alto NG FW, Palo Alto IPS/IDS, Panorama
Prisma Access/ GlobalProtect VPN
- Azure WAF
- Azure Bastion hosts (AVD)
-MIST AP (Important)
- Firewall policy design & optimization
-IPS/IDS, proxy, URL filtering, DNS security
-VPN/IPSec/SSL/Remote Access
- Network segmentation & micro-segmentation
- Cloud network security (AWS/Azure/GCP)
- Strong knowledge of network protocols: TCP/IP, BGP, OSPF, DNS, DHCP, VLANs, SD-WAN.
- Familiarity with packet capture tools (Wireshark, tcpdump) and traffic analysis.
-Scripting knowledge (Python, PowerShell, Bash) is added advantage.
-Leadership & Soft Skills
-Team management and mentoring experience.
- Strong problem-solving and decision-making skills.
- Preferred certifications:
- CCNP Security / CCIE Security
- PCNSE (Palo Alto)
- CISSP
-Cloud Security certifications (AZ-500, AWS Security, GCP Security



Additional Information:
- The candidate should have minimum 7 years of experience in Network Security Operations.
- This position is based at our M2B - STPI location.
- A 15 years full time education is required.

15 years full time education

Accenture is a leading global professional services company that helps the world’s leading businesses, governments and other organizations build their digital core, optimize their operations, accelerate revenue growth and enhance citizen services—creating tangible value at speed and scale. We are a talent- and innovation-led company with approximately 791,000 people serving clients in more than 120 countries. Technology is at the core of change today, and we are one of the world’s leaders in helping drive that change, with strong ecosystem relationships. We combine our strength in technology and leadership in cloud, data and AI with unmatched industry experience, functional expertise and global delivery capability. Our broad range of services, solutions and assets across Strategy & Consulting, Technology, Operations, Industry X and Song, together with our culture of shared success and commitment to creating 360° value, enable us to help our clients reinvent and build trusted, lasting relationships. We measure our success by the 360° value we create for our clients, each other, our shareholders, partners and communities.

Visit us at www.accenture.com